RE: Distributed Firewall

From: A Packard (Bugtraq) <bugtraq_posts(at)firegoblin.com>
Date: Thu Apr 24 2003 - 12:07:38 EDT

There are quite a few commercial firewall products that are designed for installation on a single machine, there's a version of CheckPoint FW-1 that is for host based protection rather than network protection and it integrates seamlessly into FW-1/Provider-1 management systems.

-----Original Message-----
From: David Gillett [mailto:gillettdavid@fhda.edu] Sent: 23 April 2003 18:11
To: 'Kendric'; security-basics@lists.securityfocus.com Subject: RE: Distributed Firewall

> -----Original Message-----

  I think the idea probably has some merit as part of a "defence in depth" approach.
  But I don't think it's sufficient on its own, because the resources that need to be protected do not exist just on the individual machines. The network which connects them -- upon which this approach DEPENDS rather heavily! -- lies outside the boundary of what can be protected this way.

  A network which includes both gateway firewalls and individual host security is going to be a harder nut to crack than a network that relies on only one or the other approach. And centralised administration of individual-host firewalls is an idea whose time is surely here.

David Gillett

---

Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the world's premier event for IT and network security experts. The two-day Training features 6 hand-on courses on May 12-13 taught by professionals. The two-day Briefings on May 14-15 features 24 top speakers with no vendor sales pitches. Deadline for the best rates is April 25. Register today to ensure your place. http://www.securityfocus.com/BlackHat-security-basics

---

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (
http://www.grisoft.com).
Version: 6.0.470 / Virus Database: 268 - Release Date: 08/04/2003

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (
http://www.grisoft.com).
Version: 6.0.470 / Virus Database: 268 - Release Date: 08/04/2003


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place.  
http://www.securityfocus.com/BlackHat-security-basics 
----------------------------------------------------------------------------

Received on Thu Apr 24 14:33:17 2003